Exposure Library / Domains / Database

Technology domain · Database

Data that answers to anyone.

Database engines are meant to sit behind an application, not face the internet. The scan finds database services that are directly reachable and flags the ones without adequate controls.

Trusted by leading carriers and brokers

Johnson Kendall Johnson
Crum & Forster
Allied World
Trium Property
Sullivan Group
Profinity
Intact Insurance
Munich Re
Old Republic Cyber
What the scan checks

What it looks for.

Reachable engines

Database services answering on internet-facing hosts.

Access controls

Engines reachable without proper authentication.

Known vulnerabilities

Database software versions matched to known flaws.

Why it matters

The underwriting view.

A database reachable from the internet is a direct path to the records it holds. Even with authentication, it invites credential attacks and puts known vulnerabilities in reach.

Representative finding
DomainDatabase
FindingDatabase service reachable from the internet
PerilsData Breach · Business Interruption
Hazard categoryUnsecured databases reachable externally
Where it showsRisk Detections and Infrastructure (by host)
After bind

Confirm what’s really exposed.

The RED Scan reports exposed data services, including databases and storage, as part of its exposed-services track.

See RED in Portfolio Management →

Back-test us against your own book.

Send five past submissions you’ve already bound, conditioned or declined. We score them blind, then put our read next to the call you made.